Compare commits

...

6 Commits

2 changed files with 17 additions and 10 deletions

View File

@ -3,9 +3,9 @@ version: "3.8"
services: services:
app: app:
image: "keycloak/keycloak:20.0.3" image: "keycloak/keycloak:22.0.4"
entrypoint: > entrypoint: >
bash -c "KC_DB_PASSWORD=\"$$(cat /run/secrets/db_password)\" /opt/keycloak/bin/kc.sh start" bash -c "KEYCLOAK_ADMIN_PASSWORD=\"$$(cat /run/secrets/admin_password)\" KC_DB_PASSWORD=\"$$(cat /run/secrets/db_password)\" /opt/keycloak/bin/kc.sh start"
networks: networks:
- proxy - proxy
- internal - internal
@ -21,12 +21,14 @@ services:
- KC_SPI_CONNECTIONS_JPA_LEGACY_MIGRATION_STRATEGY=update - KC_SPI_CONNECTIONS_JPA_LEGACY_MIGRATION_STRATEGY=update
- KEYCLOAK_ADMIN=${ADMIN_USERNAME} - KEYCLOAK_ADMIN=${ADMIN_USERNAME}
- KEYCLOAK_WELCOME_THEME=${WELCOME_THEME} - KEYCLOAK_WELCOME_THEME=${WELCOME_THEME}
healthcheck: # NOTE(3wc): disabled due to missing curl binary, see
test: ["CMD", "curl", "-f", "http://localhost:8080"] # https://git.coopcloud.tech/coop-cloud/keycloak/issues/15
interval: 30s # healthcheck:
timeout: 10s # test: ["CMD", "curl", "-f", "http://localhost:8080"]
retries: 10 # interval: 30s
start_period: 1m # timeout: 10s
# retries: 10
# start_period: 1m
volumes: volumes:
- "themes:/opt/keycloak/themes" - "themes:/opt/keycloak/themes"
depends_on: depends_on:
@ -44,10 +46,10 @@ services:
- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect" - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true" - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}" - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
- "coop-cloud.${STACK_NAME}.version=5.0.2+20.0.3" - "coop-cloud.${STACK_NAME}.version=7.0.1+22.0.4"
db: db:
image: "mariadb:10.6" image: "mariadb:10.11"
environment: environment:
- MYSQL_DATABASE=keycloak - MYSQL_DATABASE=keycloak
- MYSQL_USER=keycloak - MYSQL_USER=keycloak
@ -66,6 +68,9 @@ services:
backupbot.backup.path: "/tmp/dump.sql.gz" backupbot.backup.path: "/tmp/dump.sql.gz"
backupbot.backup.post-hook: "rm -f /tmp/dump.sql.gz" backupbot.backup.post-hook: "rm -f /tmp/dump.sql.gz"
backupbot.backup.pre-hook: "sh -c 'mysqldump -u root -p\"$$(cat /run/secrets/db_root_password)\" keycloak | gzip > /tmp/dump.sql.gz'" backupbot.backup.pre-hook: "sh -c 'mysqldump -u root -p\"$$(cat /run/secrets/db_root_password)\" keycloak | gzip > /tmp/dump.sql.gz'"
backupbot.restore.pre-hook: "sh -c 'cd /tmp && gzip -d dump.sql.gz'"
backupbot.restore: "true"
backupbot.restore.post-hook: "sh -c 'mysql -u root -p\"$$(cat /run/secrets/db_root_password)\" keycloak < /tmp/dump.sql && rm -f /tmp/dump.sql'"
networks: networks:
internal: internal:

2
release/6.0.0+21.0.2 Normal file
View File

@ -0,0 +1,2 @@
Healthchecks are disabled, see
https://git.coopcloud.tech/coop-cloud/keycloak/issues/15